Privacy Policy

I’m Jessica Ashby, a North London artist. I run this website to show my work, sell art prints and take bookings for my paint workshops and events. This page explains what personal information the site collects, why, and what your rights are. I’ve kept it short and in plain English.

When you send me a message

The contact form asks for your name, email address and your message. I use these only to reply to you. The legal basis is my legitimate interest in responding to enquiries — you can object or ask me to delete your message at any time.

Messages are delivered to my email and a copy is kept in the website’s own inbox so nothing gets lost. I keep enquiries for up to 24 months, then delete them.

When you buy a print (when the shop is taking orders)

To fulfil an order I need your name, email, delivery address and the details of what you bought. The legal basis is that the processing is necessary for our contract — I can’t send you a print without an address.

Card payments are taken by Stripe; your card details go directly to Stripe and are never seen or stored by this website. Order records are kept for six years to meet UK tax and accounting rules.

When you book a workshop or event

Ticket booking is handled by DesignMyNight, a third-party booking service shown on my events pages. Any details you enter in the booking widget go to DesignMyNight, not to this website — their privacy notice applies. The widget only loads after you choose to load it (see Cookies below).

Technical information

The site is looked after by Red Eagle Tech Ltd and hosted on Microsoft Azure in the UK. Standard server logs and performance monitoring (error rates, response times, IP addresses in logs) are kept for security and to keep the site working. These are used only for diagnostics and are deleted on a rolling basis.

Who helps me run the site

These providers process data on my behalf, under contract:

  • Red Eagle Tech Ltd (UK) — builds and manages the website and hosting
  • Microsoft Azure (UK region) — hosts the website, its database and images
  • Twilio SendGrid (US) — delivers the site’s emails (e.g. your enquiry to my inbox)
  • DesignMyNight (UK) — event ticketing, via their booking widget
  • Stripe (US/IE) — card payments, when the shop is taking orders

Where a provider processes data outside the UK (SendGrid, Stripe), the transfer is protected by recognised safeguards — the UK International Data Transfer Addendum / standard contractual clauses. I never sell your information, and I don’t use it for advertising.

Cookies

This site sets only essential cookies — the ones the shop needs to remember a basket and keep working. They are not used to track you, so there’s no cookie pop-up for them.

The DesignMyNight booking widget is a third-party service that sets its own cookies. It doesn’t load automatically: you’ll see a “show dates & book tickets” button first, and their cookies are only set once you choose to load it.

There are no analytics or advertising cookies on this site.

Your rights

Under UK data-protection law you can ask me to: tell you what information I hold about you (access); correct it; delete it; restrict or object to how it’s used; or give it to you in a portable format. Email me at hey@thisisjess.co.uk and I’ll respond within one month.

If you’re not happy with how I’ve handled your information, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.

Changes to this policy

If anything here changes (for example, when online card payments switch on), I’ll update this page and the date at the top.

Questions? Email hey@thisisjess.co.uk.